Welcome to Splunk Answers, a Q&A forum for users to find answers to questions about deploying, managing, and using Splunk products. Contributors of all backgrounds and levels of expertise come here to find solutions to their issues, and to help other users in the Splunk community with their own questions.

This quick tutorial will help you get started with key features to help you find the answers you need. You will receive 10 karma points upon successful completion!

Cannot connect remotely to Splunk Web interface

I have a problem where I cannot remotely access the web interface (not via HTTPS or HTTP on either 8000 or 8089) of one of my Windows HF.

However, when I RDP to the server, I can launch a browser and connect to either the loopback IP (https://127.0.0.1:8000) or the public IP (https://x.x.x.x:8000)

If I check wireshark, I see the syn packets come in, but no response at all being sent out.

This, of course, points to the firewall being a problem, but I checked the firewall and it is configured to accept all connections from any IP on any port for the Splunk application (and the splunk web application, but if I remember correctly, that's not used anymore). I tried disabling the firewall by going to Windows Firewall with Advanced Security on Local Computer Properties and turning the firewall state to OFF, but I still couldn't connect.

This started sometime in the past month. Since I don't routinely connect to this interface, I don't know when it stopped working. And it means it used to work without outgoing firewall rules configured.

There are NO references to failed connections or anything similar in splunkd.log. I enabled the firewall text log, but that genereated no entrieds either (or I'm doing that wrong).

The only things I know have changed (besides patches being applied) are java 1.8 and Logstash 5.4.1 were installed. Logstash is NOT running.

While I go create some outbound firewall rules to see if that works, I figured I'd post here to see if anyone else has any ideas. I also still have to look in the Windows Event log to see if there are entries there...

We use our own and third-party cookies to provide you with a great online experience. We also use these cookies to improve our products and services, support our marketing campaigns, and advertise to you on our website and other websites. Some cookies may continue to collect information after you have left our website. Learn more (including how to update your settings) here. Closing this box indicates that you accept our Cookie Policy.